polyglot-maven 0.8~tobrien+git20120905-8 MIGRATED to testing

FYI: The status of the polyglot-maven source package in Debian's testing distribution has changed. Previous version: 0.8~tobrien+git20120905-7 Current version: 0.8~tobrien+git20120905-8 -- This email is automatically generated once a day. As the installation of new packages into testing

libcommons-codec-java 1.11-1 MIGRATED to testing

FYI: The status of the libcommons-codec-java source package in Debian's testing distribution has changed. Previous version: 1.10-1 Current version: 1.11-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you

mojarra 2.2.8-4 MIGRATED to testing

FYI: The status of the mojarra source package in Debian's testing distribution has changed. Previous version: 2.2.8-3 Current version: 2.2.8-4 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will

jtreg 4.2-b09-1 MIGRATED to testing

FYI: The status of the jtreg source package in Debian's testing distribution has changed. Previous version: 4.2-b08-1 Current version: 4.2-b09-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will

derby 10.14.1.0-1 MIGRATED to testing

FYI: The status of the derby source package in Debian's testing distribution has changed. Previous version: 10.13.1.1-2 Current version: 10.14.1.0-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will

androidsdk-tools REMOVED from testing

FYI: The status of the androidsdk-tools source package in Debian's testing distribution has changed. Previous version: 22.2+git20130830~92d25d6-4 Current version: (not in testing) Hint: Bug #879175: androidsdk-tools: Duplicate of

reproducible.debian.net status changes for geronimo-jpa-2.0-spec

2017-11-18 01:12 https://tests.reproducible-builds.org/debian/unstable/amd64/geronimo-jpa-2.0-spec changed from reproducible -> unreproducible 2017-11-18 02:37 https://tests.reproducible-builds.org/debian/unstable/amd64/geronimo-jpa-2.0-spec changed from unreproducible -> reproducible __ This

Bug#865499: gradle fails to start in unstable after plexus-containers update

I'm actually having the inverse issue. Unsure of what changes have been made since this last report: Caused by: java.lang.IllegalArgumentException: Cannot find JAR 'plexus-component-annotations.jar' required by module 'gradle-dependency-management' using classpath or distribution directory

Bug#879001: marked as done (CVE-2017-12197: libpam4j: Account check bypass)

Your message dated Sat, 18 Nov 2017 22:19:23 + with message-id and subject line Bug#879001: fixed in libpam4j 1.4-2+deb8u1 has caused the Debian Bug report #879001, regarding CVE-2017-12197: libpam4j: Account check bypass to be marked as done. This means

Bug#870848: marked as done (jackson-databind: CVE-2017-7525: Deserialization vulnerability via readValue method of ObjectMapper)

Your message dated Sat, 18 Nov 2017 22:19:00 + with message-id and subject line Bug#870848: fixed in jackson-databind 2.4.2-2+deb8u1 has caused the Debian Bug report #870848, regarding jackson-databind: CVE-2017-7525: Deserialization vulnerability via

libpam4j_1.4-2+deb8u1_amd64.changes ACCEPTED into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 07 Nov 2017 13:40:55 +0100 Source: libpam4j Binary: libpam4j-java libpam4j-java-doc Architecture: source all Version: 1.4-2+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Debian Java Maintainers

jackson-databind_2.4.2-2+deb8u1_amd64.changes ACCEPTED into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 19 Oct 2017 01:44:42 +0200 Source: jackson-databind Binary: libjackson2-databind-java libjackson2-databind-java-doc Architecture: source all Version: 2.4.2-2+deb8u1 Distribution: jessie-security Urgency: high

jackson-databind_2.4.2-2+deb8u2_amd64.changes ACCEPTED into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 16 Nov 2017 09:13:27 +0100 Source: jackson-databind Binary: libjackson2-databind-java libjackson2-databind-java-doc Architecture: source all Version: 2.4.2-2+deb8u2 Distribution: jessie-security Urgency: high

jackson-databind_2.8.6-1+deb9u2_source.changes ACCEPTED into proposed-updates->stable-new, proposed-updates

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 16 Nov 2017 08:55:34 +0100 Source: jackson-databind Binary: libjackson2-databind-java libjackson2-databind-java-doc Architecture: source Version: 2.8.6-1+deb9u2 Distribution: stretch-security Urgency: high

Bug#882052: byte-buddy: missing build dependency on libeclipse-aether-java

Good catch. Actually it should depend on maven-resolver, eclipse-aether is about to be removed. Emmanuel Bourg __ This is the maintainer address of Debian's Java team . Please use debian-j...@lists.debian.org for

Bug#882052: byte-buddy: missing build dependency on libeclipse-aether-java

Source: byte-buddy Version: 1.7.2-1 Severity: serious https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/byte-buddy.html ... [INFO] [INFO] [INFO] Skipping Byte Buddy (parent) [INFO] This project has been